Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE479D9A915911F1958EADBCCE1D38B0.roa
File: DE479D9A915911F1958EADBCCE1D38B0.roa (raw, json)
Hash identifier: DH2O3L4Cx6FTZ1oMYUEeKK17qIXCzPb51HMGG+2yoMo=
Subject key identifier: DC:E9:D4:A4:73:D7:C6:DB:8F:1C:43:27:6F:37:1F:F8:EA:F2:5B:1E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20D3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE479D9A915911F1958EADBCCE1D38B0.roa
Signing time: Thu 06 Aug 2026 05:44:19 +0000
ROA not before: Thu 06 Aug 2026 05:44:15 +0000
ROA not after: Sat 05 Aug 2028 05:44:15 +0000
asID: 14670
IP address blocks: 154.16.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8403 (0x20d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 6 05:44:15 2026 GMT
Not After : Aug 5 05:44:15 2028 GMT
Subject: CN=6a741f33-23d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:e0:a0:4a:29:25:c9:b7:e3:76:91:e1:34:
2d:80:d5:26:fa:86:38:f5:4d:af:44:96:07:0a:ca:
52:cb:05:9a:89:d5:51:95:6b:62:5a:bc:7e:be:97:
d3:a2:c3:bf:ca:23:b7:8d:e8:d1:bb:a2:a8:d2:43:
73:92:d8:78:e8:08:97:c4:b7:43:9b:62:05:c5:d6:
41:bf:c4:17:e0:cb:02:ab:92:92:c6:a7:f2:bf:88:
38:a4:0c:6a:f9:7d:3a:69:b4:91:7e:f1:8c:58:a0:
ab:c9:c6:c7:f5:1e:1c:ee:79:d3:a6:43:d4:12:48:
ab:6c:d5:36:4a:07:fd:03:d4:ad:dd:14:eb:b4:66:
61:b3:61:c6:bd:e9:a1:82:47:79:94:8c:dd:b4:23:
73:0e:0c:3d:e6:4d:8c:15:d5:7f:49:dd:30:4f:f9:
1a:66:12:63:ab:f1:7a:c4:0a:04:f4:ef:f7:e7:50:
4b:67:1a:e1:86:e2:84:0e:de:08:e7:ce:d5:ae:4b:
32:e9:83:4d:24:3e:4a:da:32:a6:a6:54:77:9f:75:
b6:6f:92:6e:1f:27:65:68:e1:f2:43:c3:c3:a8:ae:
f0:39:a2:ac:29:c8:25:04:7d:d2:17:92:fc:b0:af:
c3:f4:91:df:70:4c:1b:3d:af:9f:b3:48:0e:42:8a:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E9:D4:A4:73:D7:C6:DB:8F:1C:43:27:6F:37:1F:F8:EA:F2:5B:1E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE479D9A915911F1958EADBCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.115.0/24
Signature Algorithm: sha256WithRSAEncryption
11:59:ff:04:0c:91:de:fb:76:3b:29:47:90:9b:89:ea:ea:47:
3d:9a:71:8e:63:23:82:55:f3:bc:8d:1d:dc:ac:c9:89:09:e0:
ef:60:da:73:d1:a3:1e:b5:a7:62:44:3c:52:65:5c:a3:03:b1:
97:fe:ac:c9:3e:3a:66:fb:f9:62:65:5d:39:ed:7a:71:32:19:
88:c0:b8:b7:8a:9a:66:e1:42:7e:44:47:6c:04:c8:de:e4:dd:
7b:06:8e:a6:5b:3e:80:69:d3:66:71:1c:28:15:54:3e:b9:e0:
7e:05:be:c1:61:dd:26:d6:2a:3d:28:f5:a3:3b:9a:14:a1:77:
f6:c3:ae:82:48:36:e6:bb:b8:be:40:32:b0:01:8f:46:96:c7:
84:90:37:b6:3e:05:1d:54:de:c7:4a:41:e1:96:da:0e:dc:86:
1f:3c:a9:05:48:94:65:0b:0e:a3:1b:a9:f9:15:fb:19:51:c7:
c7:4f:b1:8c:2f:25:ae:21:4e:10:fb:e3:79:bb:11:5a:17:20:
f2:7f:a4:f5:b7:12:c1:d9:1c:d7:b2:fa:4e:57:f8:6b:88:3a:
0a:03:19:00:fe:14:5d:67:bb:f6:bb:9f:b3:59:b1:6e:7c:38:
db:4d:c7:67:66:aa:61:0c:38:46:f4:0d:28:f1:14:24:9e:2f:
1a:6c:46:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:36:52 2026 by rpki-client